GitHub adds credential revocation and deauthorization by token type

Shipped 18 August 2026 as an application-security improvement, the change lets an organisation revoke and deauthorize credentials selectively by token type rather than in one undifferentiated sweep.

What it means Agent tooling multiplies the number of live tokens against a repo; killing one class without logging every human out is the difference between containing an incident and causing an outage.